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Abstract 

We introduce a new random key predistribution scheme for securing heterogeneous 
wireless sensor networks. Each of the n sensors in the network is classified into r classes 
according to some probability distribution fi = {fii,..., fir}- Before deployment, a 
class-i sensor is assigned Ki cryptographic keys that are selected uniformly at random 
from a common pool of P keys. Once deployed, a pair of sensors can communicate 
securely if and only if they have a key in common. We model the communication 
topology of this network by a newly defined inhomogeneous random key graph. We 
establish scaling conditions on the parameters P and {ATi,..., Kr} so that this graph i) 
has no isolated nodes; and ii) is connected, both with high probability. The results are 
given in the form of zero-one laws with the number of sensors n growing unboundedly 
large; critical scalings are identified and shown to coincide for both graph properties. 

Our results are shown to complement and improve those given by Godehardt et al. and 
Zhao et al. for the same model, therein referred to as the general random intersection 
graph. 

Keywords: Heterogeneous Wireless Sensor Networks, Security, Key Predistribution, Inhomo¬ 
geneous Random Key Graphs, Connectivity. 

1 Introduction 

Random key graphs are naturally induced by the Eschenauer-Gligor (EG) random key predistribu¬ 
tion scheme [9], which is a widely recognized solution for securing wireless sensor network (WSN) 
communications [Si. Denoted by G{n, K, P), random key graph is constructed on the vertices 
V = {vi,V 2 , ■ ■ ■ ,Vn} as follows. Each vertex Vi is assigned independently a set Sj of K cryptographic 
keys that are picked uniformly at random from a pool of size P. Then, any pair of vertices Vi, Vj are 
adjacent if they share a key, i.e., if SjnSj ^ 0. Random key graphs have recently received attention 
in a wide range of areas including modeling small world networks [23], recommender systems cu, 
and clustering and classification analysis m- Properties that have been studied include absence of 
isolated nodes |23|, connectivity [251 HZ], ^-connectivity m, and /^-robustness [26|, among others. 

In this paper we propose and study a variation of the EG scheme that is more suitable for 
heterogeneous WSNs; it is in fact envisioned that many military and commercial WSN applications 
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will consist of heterogeneous nodes |19lll8j . Namely, we assume that the network consists of sensors 
with varying level of resources (e.g., computational, memory, power) and possibly with varying level 
of security and connectivity requirements. As a resnlt of this heterogeneity, it may no longer be 
sensible to assign the same nnmber of keys to all sensors in the network as prescribed by the EG 
scheme. Instead, we consider a scheme where the number of keys that will be assigned to each sensor 
is independently drawn from the set K = {Ki ,..., according to some probability distribution 
/r = {/xi,..., fir}, for some fixed integer r. We can think of this as each vertex Vx being assigned to 
a priority class-i with probability fii > 0 and then receiving a key ring with the size Ki associated 
with this class. As before, we assume that once its size is fixed, the key ring is constructed by 
sampling the key pool randomly and without replacement. 

Let G(n; fi, K, P) denote the random graph induced by the heterogeneous key predistribution 
scheme described above, where again a pair of nodes are adjacent as long as they share a key; see 
Section [2] for precise definitions. Inspired by the recently studied inhomogeneous Erdos-Renyi (ER) 
graphs lais], we refer to this graph as the inhomogeneous random key graph. The main goal of this 
paper is to study connectivity properties of G{n; fi, K, P) and to understand how the parameters 
n, fi,K, P should behave so that the resulting graph is connected almost surely. Such results can be 
usefnl in deriving guidelines for designing heterogenous WSNs so that they are securely connected. 
By comparison with the results for the standard random key graph, they can also shed light on the 
effect of heterogeneity on the connectivity properties of WSNs. 

We establish zero-one laws for the property that G{n; fi, K, P) has no isolated nodes (see Theo¬ 
rem EH) and for the property that G(n; fi, K, P) is connected (see Theorem 13.2p . Namely, we scale 
the parameters K and P and provide critical conditions on this scaling such that the resulting 
graph almost surely has no isolated node (resp. connected) and almost surely has at least one iso¬ 
lated node (resp. connected), respectively, when the number of nodes n goes to infinity. We show 
that the critical conditions for the two graph properties coincide, meaning that absence of isolated 
nodes and connectivity are asymptotically equivalent properties for the inhomogeneous random key 
graph. Other well-known models that exhibit the same behavior include ER graphs [2], random 
key graphs [ 25 ] j and random geometric graphs m- 

Our results are also compared with the existing results by Zhao et al. |26] and Godehardt et 
al. m for the /c-connectivity and connectivity, respectively, of G{n; fi, K, P); in those references 
G(n; /X, K, P) was referred to as a general random intersection graph. We show that earlier resnlts 
are constrained to parameter ranges that are unlikely to be feasible in real world WSN implemen¬ 
tations due to excessive memory requirement or very limited resiliency against adversarial attacks. 
On the contrary, our results cover parameter ranges that are widely regarded as feasible for most 
WSNs; see Section EE) for details. 

In addition, our main results indicate that the minimum key ring size in the network has a 
significant impact on the connectivity of G(n;/x, IT, P), perhaps in a way that wonld be deemed 
surprising. In particular, for the standard random key graph G(n; K, P) the critical threshold for 
connectivity and absence of isolated nodes is known |25l ET] to be given by ~ 
resulting graph is asymptotically almost surely connected (resp. not connected) if c > 1 (resp. c < 
1). For the inhomogeneous random key graph G(n; /x, K, P) one would be tempted to think that 

an equivalent result holds under the scaling —~ with ATavg = Y}J'j=il^j ^3 denoting the 

mean key ring size. Instead, we show that the zero-one laws for absence of isolated nodes and 
connectivity hold under ^ where iTmin stands for the minimum of {Ki, ..., iTr}; 

see Corollary 13.31 This implies that in the heterogeneous key predistribution scheme, the mean 
number of keys required per sensor node to achieve connectivity can be significantly larger than 
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that required in the homogeneous case. For instance, the expense of allowing an arbitrarily small 
fraction of sensors to keep half as many keys as in the homogeneous case would be to increase the 
average key ring size by two-fold. 

The rest of the paper is organized as follows. In Section [2l we give detailed description of 
the heterogeneous random key predistribution scheme and the resulting inhomogeneous random 
key graph model. Section [3] is devoted to presenting the main results of the paper, namely the 
zero-one laws for absence of isolated nodes (see Theorem ET]) and for connectivity (see Theorem 
13.21) in inhomogeneous random key graphs. There, we also compare our results with relevant work 
from the literature and also comment on the implications of our results on designing secure sensor 
networks. In Section 01 we present some preliminary technical results that will be useful in proving 
the main results of the paper. The proof of Theorem 13.11 is outlined in Section [5] with necessary 
technical steps completed in Section [6l We start the proof of Theorem [312] in Section [7| and complete 
it in Sections [8| through Section (TO] 

We close with a word on notation and conventions in use. All limiting statements, including 
asymptotic equivalences, are understood with the number of sensor nodes n going to inhnity. The 
random variables (rvs) under consideration are all defined on the same probability triple (11, T”, P). 
Probabilistic statements are made with respect to this probability measure P, and we denote the 
corresponding expectation and variance operators by E and var, respectively. We use the notation 
=st to indicate distributional equality. The indicator function of an event E is denoted by 1 [E], 
while E‘^ denotes the complement of E. We say that an even holds with high probability (whp) if 
it holds with probability 1 as n —)• oo. For any discrete set S we write \S\ for its cardinality. In 
comparing the asymptotic behaviors of the sequences {an}, {bn}, we use an = o{hn), an = w{bn), 
an = 0{bn), an = it{bn), and = &{bn), with their meaning in the standard Landau notation. 
We also use an ~ bn to denote the asymptotic equivalence lim„_).oo Un/^n = 1. 

2 Model Definitions 

Consider a network that consists of n sensor nodes labeled as vi,... ,Vn- Our key predistribution 
idea is based on classifying the nodes in this network into r sets (e.g., depending on their level of 
importance) and then assigning different number of cryptographic keys to sensors based on their 
class. Assume that each of the n nodes in the network are independently assigned to a class 
according to some probability distribution /.i : {1,..., r} —)• (0,1). Namely, with tx denoting the 
class (or, type) of node Vx, we have 

r[te = i] = fj.i > 0, i = l,...,r, 

for each i = Then, a class-i node is assigned Ki keys that are selected uniformly at 

random from a pool of size P, for each i = 1,..., r. More precisely, the key ring of a node x is 
an -valued random variable (rv) where Va denotes the collection of all subsets of {!,... ,P} 
which contain exactly A elements - Obviously, we have \Va\ = (^)- It is further assumed that the 
rvs Si,..., are independent and identically distributed. 

Let K = {Ki,...,Kr) and pL = {pi,..., fir). Without loss of generality we assume that 
Ki < K 2 < ■ ■ ■ < Kr- Consider a random graph G defined on the vertex set V = {ui ,... ,Vn} such 
that two nodes Vx and Vy are adjacent, denoted Vx ^ Vy, if they have at least one key in common 
in their corresponding key rings. Namely, we have 

Vx ~ Vy if Sa; n Sy / 0. (1) 
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The adjacency condition ([T]) defines the inhomogeneous random key graph, hereafter denoted 
G(n; /X, iT, P). The name is reminiscent of the recently studied inhomogeneous random graph [3] 
model where nodes are again divided into r classes, and a class i node and a class j node are 
connected with probability ptj independent of everything else. This independence disappears in 
the inhomogeneous random key graph case, but one can still compute pij as 


Pij ■■= 1 - 



i,j = 


( 2 ) 


In view of our key predistribution scheme results in higher priority nodes (i.e., nodes with 
more assigned keys) connecting with each other with higher probability; see Proposition 14.11 In 
presenting our results below, we shall make use of the mean probability of edge occurrence for each 
node class. Namely, we define 


h-='^PijPj, i = l,...,r, 
i=i 


( 3 ) 


where pij denotes the probability that a node of class-f and a node of class-j have an edge in 
between; see (l2|). It is easy to see that the mean number of edges incident on a node (i.e., the 
degree of a node) of class-i is given by (n — l)Ai. 

Throughout, we assume that the number of classes r is fixed and do not scale with n, and so are 
the probabilities pi,..., pr >0. All remaining parameters are assumed to be scaled with n, and we 
shall be interested in the properties of the resulting inhomogeneous random key graph as n grows 
unboundedly large. The dependence of scheme parameters and events on n will be denoted by a 
subscript, while that of some variables will be denoted by a parenthesis. For instance, we define 


and 


/ Pn 

/ \ 1 ^ 

■= 1 - /P. N 


hj = 1, ■ ■ ■, A 


i=i 


( 4 ) 

( 5 ) 


3 Main Results and Discussion 


3.1 The results 

Our main results are presented next. To fix the terminology, we refer to any mapping Ki, ..., Kr, P : 
No —)• Nq'*'^ as a scaling as long as the conditions 

1 < Kpn < K2,n < ■ ■ ■ < Kr,n < Pn (6) 

are satisfied for all n = 2,3,.... To simplify the notation, we also let = {Ki,n, K 2 ,n, ■ ■ ■; Kr,n)- 
We first present a zero-one law for the absence of isolated nodes in inhomogeneous random key 
graphs. 
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Theorem 3.1 Consider a probability distribution p = (/ii, ..., pr) with pi > 0 for i = 1,... ,r, 
and a scaling Ki,..., Kr, P '■ ^ such that 

Ai(n)~c- (7) 

n 

for some c > 0. Then, we have 


lim F[G{n] gi, Kn, 

n^oo 


Pn) 


has no isolated nodes ] = 


0 if c < 1 
1 if c > 1. 


( 8 ) 


A proof of Theorem 13.11 can be found in Section [5l The scaling condition ([7|) will often be used 
in the equivalent form 

Xi{n) = Cn - (9) 


n 


with lim„^oo Cn = c> 0. 

Next, we present an analogous result for the property of graph connectivity. 


Theorem 3.2 Consider a probability distribution p = {m,..., pr) with pi > 0 for i = 1,... ,r, 
and a scaling Ki,..., Kr, P : ^ such that (0) holds for some c > 0. Under the assumptions 

Pn = fl(n) (10) 


and 


we have 


{Kl,n)^ 

Pn 


= W 



lim F [G{n] p, Kn, Pn) is connected 

n^oo 


' 0 if c < 1 
1 if c> 1. 

\ 


( 11 ) 


( 12 ) 


The condition (llOp implies that there exists a constant cr > 0 such that 

Pn > 


(13) 


for all n = 2, 3,... sufficiently large. 

In words, Theorem 13.11 (resp. Theorem I3.2jl states that the inhomogeneous random key graph 
G(n; pi:Kn , Pn) has no isolated node (resp. is connected) whp if the mean degree of “the nodes that 
have the least number of keys” is scaled as (1 + e) logn for some e > 0; in view of Proposition 14.11 
the nodes that are assigned the least number of keys have the minimum mean-degree in the graph. 
On the other hand, if this minimal mean degree scales like (1 — e) logn for some e > 0, then whp 
G{n-, p., Kn, Pn) has a node that is isolated, and hence not connected. The additional conditions 
m and (jlip are enforced here merely for technical reasons and are required only for the one-law 
part of the connectivity result. Theorem 13.21 A detailed discussion on these additional conditions 
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is given in Section 13.21 where we explain why they are likely to hold in many real-world WSN 
applications. There, we also discuss how and when these conditions can be relaxed or replaced by 
milder conditions. 

Our results demonstrate that the inhomogeneous random key graph provides one more example 
random graph model where the properties of absence of isolated nodes and connectivity are asymp¬ 
totically equivalent. Other well-known examples include Erdos-Renyi graphs [2], random key graphs 
|25j , random geometric graphs m. and intersection of random key graphs and ER graphs [2T]. Our 
results are also analogous to the recent hndings by Levroye and Ereiman [5] for the connectivity of 
inhomogeneous Erdos-Renyi graph model, where nodes are classified into r classes independently 
according to a probability distribution fi and an edge is drawn between a class-i and a class-j node 
with probability Pij{n) independent of everything else. With Aj(n) defined as in ([5]), their result 
states that if minj=i^...^j. \i{n) ~ clogn/n then with c > 1 (resp. c < 1) the corresp^onding graph is 
connected (resp. not connected) whp, under some additional technical conditionso 

We now present a corollary that states the zero-one laws of Theorem 13 .1 1 and Theorem 13.21 under 
a different scaling condition than ([7]). This alternative formulation will make it easier to derive 
design guidelines for dimensioning heterogeneous key predistribution schemes, namely in adjusting 
key ring sizes Ki ,..., and probabilities pi,..., pr such that the resulting network i) has no 
isolated sensors and ii) is connected, both whp. 


Corollary 3.3 Consider a probability distribution p = (/ri,... ,pr) with pi > 0 for i = 1,... ,r 
and a scaling Ki,... : Nq —?• Let |S|„ denote a rv that takes the value Ki^n with 

probability pi for each i = 1,... ,r. If it holds that 

Ri,„E[|S|„] logn 

---~ c- (14) 

Pn n 

for some c > 0, then we have the zero-one law ([SP for absence of isolated nodes. If, in addition, the 
the conditions m and m are satisfied by this scaling, then we also have the zero-one law 1121) 
for connectivity. 


A proof of Corollary 13.31 is given in Appendix where we show that the scaling conditions ([7|l 
and (|14p are indeed equivalent to each other, meaning that one can obtain both Theorem 13.11 and 
Theorem 13.21 from Corollary 13.31 and vice versa. We remark that E [|E|„] gives the mean number of 
keys assigned to a sensor in the network. With this in mind. Corollary 13.31 provides various design 
choices to ensure that no sensor is isolated in the network: One just has to set the minimum and 
average key ring sizes such that their multiplication scales as (1 y for some e > 0. We also 

see from Corollary 13.31 that such a scaling would also ensure connectivity as long as the additional 
conditions (HQD-dll]) are also satisfied. 

To compare with the homogeneous random key predistribution scheme, set r = 1 and consider 
a universal key ring size in Corollary 13.31 This leads to zero-one laws for the absence of isolated 
nodes and connectivity in the standard random key graph G{n‘, Kn, Pn)- Namely, with 


log n 
~ c - 


c > 0 


(15) 


analogs of ([8]) and (fT2]) are obtained for G{n-, Kn, Pn)] these results had already been established 
[231 [25] by the authors (in stronger forms). An interesting observation is that minimum key ring 

^Results in [5] cover more general cases than presented here; e.g., the case where the number of classes r is not 
bounded. 
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size has a dramatic impact on the connectivity properties of inhomogeneous random key graph. To 
provide a simple and concrete example, set Pn = nlogn. In the homogeneous case, we see from 
(fT5|) that the universal key ring size has to scale as Kn = (1 + e) log n for some e > 0 to ensure that 
the network is free of isolated nodes and is connected. In the heterogeneous case, one gains the 
flexibility of having a positive fraction of sensors in the network with substantially smaller number 
of keys. For the absence of isolated nodes, a positive fraction of sensors can be assigned as few as 
one key per node. However, from Corollary 13.31 we see that this comes at the expense of having to 
assign a substantially larger key rings to a positive fraction of other sensors in the network. More 
precisely, if Ki^n = 0(1) then we must have Kr^n = f^((logn)^) to have no isolated nodes under 
the same setting. For connectivity on the other hand, we see from 111 bp that the minimum key ring 
size Ki^n can be kept on the order of O(-^logn) and connectivity can still be achieved with mean 
key ring size satisfying 0((log 


3.2 Comments on the technical conditions (llOll - dlip of Theorem 13.21 

We now provide a detailed discussion on the technical conditions (HOI) and m enforced in The¬ 
orem ESI We will focus on i) the feasibility of these additional conditions for real-world WSN 
implementations, and ii) when and how they can be replaced with milder conditions. 

We start with the condition (jlOl) that states the key pool size grows at least linearly with the 
network size re. In terms of applicability in the context of heterogeneous key predistribution schemes 
in WSNs, this condition is not stringent at all. In fact, it is often needed that key pool size Pn be 
much larger than the network size re I61019] as otherwise the network will be extremely vulnerable 
against node capture attacks. From a technical point of view, the case where Pn = n(re) is also the 
more interesting and challenging one as compared to the case where Pn = o{n). For instance, when 
Pn = 0{n^) for some 0 < 5 < 1/2, the inhomogeneous random key graph G{n; fi, Kn, Pn) can be 
shown to be connected for any /x as long as Ki^n P 2 ; see |22l Lemma 8.1] for a proof of a similar 
result for the standard random key graph. This means that if Pn = 0{n^) with <5 < 1/2, even 
two keys per sensor node is enough to get network connectivity whp. Finally, we remark that the 
scaling condition (j7]) or its equivalent (fTTp already implies that Pn = since [|S|n] > 1. 

Next, we look at the condition dill) and start with discussing possible relaxations. First of all, 
m is stronger than what is actually needed for our proof to work; it is enforced to enable a shorter 
proof and an easier exposition of the main result. By inspection of the arguments in Section [10.41 
it can be seen that dlip can be replaced with 


' t ^2 2 log 2+log(l —/ir) + € 

^ - and Ki^n = ^c(l), if < 0.75 

(16) 

, ^ = «'(!)> if > 0.75 


with some /3 > 0 and re > 0 to be specified, and for any e > 0 and any finite integer M; the details 
are omitted here for brevity. 

As we look at (Ull), we see that Ki^n = w;(l) is needed for any In fact, this condition can 
easily be satisfied in real-world WSN implementations given that key ring sizes on order of O(logre) 
are regarded as feasible for most sensor networks [?]• Considered in combination with m, other 
conditions enforced in (llbp bounds the variability in the key ring sizes used in the network. In 
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particular, given that 


lK[mn] _Ki,nK[mn] ({Kl,n?\ ' _ q /log n\ / X 1 

Kl,n Pn [ Pn J [ U J [ P^ J ’ 

(fT6l) implies = O (logn) when /Jr < 0.75 and = O ((logn)^) when /Jr > 0.75. Thus, 

we see that when more than 75 % of the sensors receive the largest key rings, one can afford to use 
much smaller key rings for the remaining sensors, as compared to the case when fjLr < 0.75. 

Collecting, while conditions enforced in (|16l) take away from the flexibility of assigning very 
small key rings to a certain fraction of sensors (as we were allowed to do for the absence of isolated 
nodes), they can still be satisfied easily in most real-world implementations. To provide a concrete 
example, one can set = nlogn and have Ki n = (logn)^/^+'^ and E [|E|„] = (1 -|- e)(log 
with any e > 0; in view of Theorem 13.21 and ()16p the resulting network will be connected whp. 
With the same Pn, it is possible to have much smaller Ki^n when fir > 0.75. For example, we can 
have iFi,n = loglog--Togn and E[|S|n] = n((logn)^). Of course, one can also have all key ring 
sizes on the same order and set Ki^n = ci logn and E [|S|„] = C2 logn with ciC2 > 1, to obtain a 
connected WSN whp. 

3.3 Comparison with related work 

The random graph model G{n; fi, Kn, Pn) considered here is also known as general random in¬ 
tersection graphs in the literature; e.g., see [26l (U [TO]. To the best of our knowledge this model 
has been first considered by Godehardt and Jaworski m and by Goderhardt et al. HH. Results 
for both the existence of isolated nodes and graph connectivity have been established; see below 
for a comparison of these results with those established here. Later, Bloznelis et al. [1] analyzed 
the component evolution problem in the general random intersection graph and provided scaling 
conditions for the existence of a giant component. There, they also established that under certain 
conditions G{n; fi, Kn, Pn) behaves very similarly with a standard Erdos-Renyi graph [2]. Taking 
advantage of this similarity, Zhao et al. [2^ established various results for the /c-connectivity and 
^-robustness of the general random intersection graph by means of a coupling argument. 

We now compare our results with those established in the literature. Our main argument is 
that previous results for the connectivity of inhomogeneous random key graphs are constrained 
to very narrow parameter ranges that are impractical for wireless sensor network applications. In 
particular, we will argue below that the result by Zhao et al. |26] is restricted to very large key ring 
sizes, rendering them impractical for resource-constrained sensor networks. On the other hand, the 
results by Godehardt et al. focus on fixed key ring sizes that do not grow with the network 

size n. As a consequence, in order to ensure connectivity, their result requires a key pool size Pn 
that is much smaller than typically prescribed for security and resiliency purposes. 

To fix the terminology, let Vn ■ {1,2,... ,P„} —>• [0,1] be the probability distribution used for 
drawing the size of the key rings Si,..., S„; as before, once its size is fixed a key ring is formed 
by sampling a key pool with size Pn randomly and without replacement. The graph G{n;'Dn, Pn) 
is then dehned on the vertices {ui,..., Vn} and contains an edge between any pair of nodes Vx and 
Vy as long as S^, n Sj, / 0. The model G(n; fi, Kn, Pn) considered here constitutes a special case of 
G(n; Pn, Pn) under the assumption that the support of Pn has a fixed size of r. 

With these definitions in mind we now state the results by Zhao et al. [26| and by Goderhardt 
et al. m, respectively. 









Theorem 3.4 fS6l Theorem 1] Consider a general random intersection graph G{n,'Dn, Pn)- Let 
|S|„ he a random variable following the probability distribution With a sequence an for all n 
defined through 

E[|S|„]2 _ logn + (fc- l)loglogn + an 

Pn ~ n ’ ^ ’ 


ifE[|S|„] = O(Vlogn), var[\J:\n] = and \a, 


lim P\G{n,Vn-,Pn) is k-connected] 

n^oo 


0 , 

< 1, 

e-“* 

e 


o(logn), then 
if 

if an — oOj 

if lim„_^ooan = a* e (- 00 , 00 ). 


Theorem 3.5 illi Theorem 2] Consider a general random intersection graph G{n,P, Pn), where 
P{f) = 0 for all i > r and £ = 0. Namely, all key ring sizes are bound to be on the interval [l,r]. 
Let |S| be a random variable following the probability distribution T). Then if 

77 

— (E[|S|]-P(l))-logP„^oo (18) 

then 

lim F[G(n,T>, Pn) is connected] = 1. 

n—)-oo 

Also, ifT>[r) = 1 for some r >2, and it holds that 

n = pJ-SPn + o(logiogP„)_ 

then 

lim FlGln,!?, Pn) is connected] = 0. 

n—)-oo 


In comparing Theorems 13.11 13.41 and 13.51 it is worth noting that fc-connectivity is a stronger 
property than connectivity, which in turn is stronger than absence of isolated nodes. However, 
although Theorems 13.41 and 13.51 consider strong graph properties, we now argue why the established 
results are not likely to be applicable for real-world sensor networks. First, Theorem 13.51 focuses on 
the case where all possible key rings have a finite size that do not scale with n. In addition, with 
E [|S|] fixed, it is clear that the scaling conditions IfTSl) and (fT9]l both require 


Pn 



( 20 ) 


Unfortunately, it is often needed that key pool size Pn be much larger than the network size n PE] 
as otherwise the network will be extremely vulnerable against node capture attacks. In fact, one 
can see that with (|20p in effect, an adversary can compromise a significant portion of the key pool 
(and, hence network communication) by capturing o(n) nodes. 

We now focus on Theorem 13.41 where the major problem arises from the assumption 


uar[|S|„] = o 


E[|SU]^ \ 

ra(logn)2y 


( 21 ) 


9 











For the model to be deemed as inhomogeneous random key graph, the variance of the key ring 
size should be non-zero. In fact, given that key ring sizes are integer-valued, the simplest possible 
case would be that T>{K + 1) = gL and T>{K) = 1 — /r for some 0 < /r < 1 and positive integer 
K. This would amount to assigning either K + 1 or K keys to each node with probabilities /r 
and 1 — /r, respectively. In this case, we can easily see that uar[|S|] = /r(l — fi) > 0 as long as 
0 < /i < 1. Therefore, for an inhomogeneous random key graph, the condition (|2ip implies that 
~ 0^5 equivalently that 

E [|S|„] = rc (v^logn) . (22) 

Put differently. Theorem 13.41 enforces mean key ring size to be much larger than ^/nlogn. However, 
a typical wireless sensor network will consist of a very large number of sensors, each with very 
limited memory and computational capability PE!- As a result, key rings with size w{^/nlogn) 
are unlikely to be implementable in most practical network deployments. In fact, it was suggested 
by Di Pietro et al. [7] that key rings with size O(logn) are acceptable for sensor networks. 

In comparison, our results Theorem 13.11 and Theorem l3.2l do not require either of the unrealistic 
conditions (l20l) or (1221) . To see this, note that the enforced scaling condition Q or its equivalent 
IfTTl) implies (see also Lemma 03])) 

Kl,nKr,n _ 0 /logU 

Pn \ n 

It is clear that this condition does not require (l20t) . and in fact already enforces Pn = H(n/logn). 
As mentioned earlier, in real-world implementations the key pool size is expected to grow at least 
linearly with n so that the additional condition m of Theorem 13.21 is automatically satisfied. 
The second additional condition m of our connectivity result and (l23]) can also be satisfied 
simultaneously without requiring the prohibitively large key ring sizes given at (|22p . To provide 
concrete examples, we can use Pn = 0(nlogn), Ki^n = 0(logn) and = 0(logn), or Pn = 
0(relogn), Ki^n = 0(\/log^) and Kr^n = 0((logWith proper choice of constants in these 
scalings, we will ensure that i) the resulting WSN is connected almost surely; ii) the key pool size 
is much larger than the network so that the resulting WSN has good level of resiliency against 
node capture attacks; and iii) the maximum key ring size used in the network is on the order of 
the ranges logn or (logn)^/^ that are usually regarded as feasible PP; these choices also lead to 
a much smaller mean key ring size than that prescribed in ()22p . 

In conclusion, we showed that our results enable parameter choices that are widely regarded as 
practical in real-world sensor networks, while previous results given in |26] and m do not. 

4 Preliminaries 

In this section, we establish several preliminary results that will be used in the proof of Theorem 
[Q The hrst result states that mean edge probabilities are ordered in the same way with the key 
ring sizes. 

Proposition 4.1 For any scaling Ki,, K^, P : No —we have 

Ai(n) < A 2 (n) < • • • < A,.(n) (24) 



for each n = 2, 3,.... 
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Proof. In view of ([5|), the desired result (I24|) will follow immediately if we show that Pij{n) is 
increasing in both i and j. Fix n = 2,3,... and recall that Ki increases as i increases. For any 
i, j such that Ki + Kj > P we see from ([2]) that Pij{n) = 1 ; otherwise if Ki + Kj < P we have 
Pij{n) < 1 . Thus, given that Ki + Kj increases with both i and j, it will be enough to show that 
Pij{n) increases with both i and j on the range where Ki + Kj < P. But, on that range, we have 


^ jP-K^y. {P-Kj)\ ^ ( _ K, \ 

© {P-K.-K,y nv p-ij- 


(25) 


It is now immediate that , y ■. decreases with both Ki and Kj, and hence with i and j. Hence, 

Uj) 

Pijin) is seen to be increasing with i and j, and this establishes Proposition 14.11 ■ 


A useful consequence of Proposition 14.II is given next. 


Lemma 4.2 Consider any scaling Ki ,..., Kr,P ■ No —)• Nq"*"^. For any i,j = 1,., 


, r, it holds that 


K K 

lim Pij{n) = 0 if and only if lim —= 0, 

n—>-cx> n—>-oo P^, 


and under either condition we have the asymptotic equivalence 


Pijin) ~ 


K K ■ 

j,n 

Pr, 


Proof. Lemma [4. 2 1 can easily be established by following the same arguments used in |25l Lemma 
7.3] or [201 Lemma 7.4.4], namely by applying crude bounds (upper and lower) to the expression 
(|25j) . The details are ommitted here for brevity. ■ 


Next, we give a result that collects several useful consequences of the scaling condition ([7|) under 

(HH). 

Lemma 4.3 Consider any scaling Ki ,..., Kr,P : No —)■ Nq"*"^ such that (0) holds for some c > 0. 
We have 


Kl^nKr 


= 0 


log n 


n 


(26) 


If in addition m holds, we have 


K^ 

Prr{n^ -■ 


~ = o 


(log n) 


n 


(27) 
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Proof. The scaling condition Q states that 


= c, 
i=i 


log n 


n 


with lim„^oo Cn = c > 0. From the proof of Proposition (I4.1j) we know that Pij{n) increases with i 
and j under any scaling. Thus, we readily obtain that 


log n / N / Cn log n 
Cn - < Pir{n) < -. 


n 


Pr n 


(28) 


Since pr > 0 this gives pir{n) = 0 = o(l), whence we get ~ Piri^) from Lemma 

lO and (f26]l is readily established. We also find it useful to state the more detailed bounds 


C log n ^ Ki^nKr,n f log ” 


2 n 


Pn 


Pr \ n 


easily seen to be valid for any n = 2, 3,... sufficiently large in view of 
We now turn to establishing (ITTl) . Comparing ([26l) with (fTT]l , we get 


K, 


r,n 


K 


l,n 




-^l,n 


= 01^1 =o(logn). 


(29) 


(30) 


Next, we multiply 


with poll to get 




Pn 


n 


Invoking Lemma 14.21 with i = j = r, we obtain ()27p . 


The following inequality will also be useful in our proof. 

Proposition 4.4 For any set of positive integers Ki ,..., K^, P, and any scalar a > 1, we have 


rr-') /(TfoT .. , 

< I d. I , z,j = l,...,r. 


iO 


(D 


(31) 


Proof. Fix i,j = 1,2, ...,r. Observe that > 0 so that (1^ holds trivially if 

Kj + \aKi] > P. Assume here onwards that Kj + \aKi] < P. Recalling (l2pl . we find 





no 


e=o 


\aK,] 

P-i 



aKi \ 

P-i) ’ 


(32) 
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and 



n 

£=0 


1 - 


Kj 

P-. 


In view of (j32n and (1331) . the desired inequality (1311) will follow if we show that 


1 - 


aKi ^ 

P-i- 



P-^) ’ 


i = -1. 


For each ^ = 0,1,... , iFj — 1, (l3H) follows as we note that 


1 - 



\ 

P-i) 



aP ^dt < 


aKi 

P-i 


(33) 


(34) 


and (f3T]l is now established. 


In the course of proving Theorem 13.11 we often make use of the decomposition 

log(l — x) = —X — 'I'(x), 0 < X < 1 

with 4'(x) := j^dt, and repeatedly use the fact that 

x4.o x^ 2 

Finally, we find it useful to derive a bound on pij. Starting with (1251) we write 


Ki-l , 


1=0 


p-l 


Tr' ( K, 

^ n b ' 

i=0 ^ 


P 


= 1 - 


P 


Ki 


< e p' 


(35) 


(36) 


(37) 


5 A proof of Theorem 13.11 — Establishing the zero-one law for 
absence of isolated nodes 

The proof of Theorem 13.II passes through applying the method of first and second moments [121 p. 
55] to the number of isolated nodes in G(n; jx, K, P). To simplify the notation, we let 6 = {K, P). 
Let /n(/^) ^) denote the total number of isolated nodes in G(n; /x, 6); i.e., 

n 

4(/x,0) = [vi is isolated in G(n; /.i, 0)] . (38) 

1=1 


5.1 Establishing the one-law 

Consider now a scaling 0 : No —)• such that dZD holds with c > 1. The random graph 

G(n;/x, 0„) has no isolated nodes if and only if /„(/x, 0„) = 0. The method of first moment [121 
Eqn. (3.10), p. 55] gives 

1 - E [4(/^, On)] < P [Inill, On) = 0] , (39) 
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whence the one-law hm„_j.ooIP ^n) = 0] = 1 will follow if we show that 


lim E[4(/i,0„)] = 0. 
n^oo 


(40) 


By exchangeability of the indicator functions appearing at (|38]l . we find 

E dn)] = nF [m is isolated in G(n; n, On)] ■ (41) 

Conditioning on the class of vi, we further get 


nP [ui is isolated in G(n;/^,0„)] = n''^^HiF[vi is isolated | vi is class i] 

i=l 

r 

= n^^/rjP [n”^ 2 bi I is class i] 

i=l 

r 

= n Hi (P [ui ^ V 2 \ vi is class i])”~^ (42) 

i=l 

where (|42l) follows from the fact that rvs {ui ^ ^.re conditionally independent given the key 

ring El of node vi. Conditioning further on the class of V 2 , we find 

r 

P [ui 9 ^ U 2 I ui is class i] = /XjP [ui 9 ^ U 2 | ui is class i, V 2 is class j] 

i=i 

r 

i=i 

= 1 - Ai(n). (43) 


Using (1431) in (Il2]) . and recalling (1241) we get 

r 

nP[ui is isolated in G(n;//, 0„)] = n^/ij(l — Ai(n))"'“^ < n(l — Ai(n))"'“^ < 

i=l 

as we also use (j^. Letting n go to inhnity in this last expression we immediately get 

lim nP [ui is isolated in G(n; /x, On)] = 0 

n—>-cx) 


since hm„_}.oo 1 — Cn^^^^ = 1 — c < 0 under the enforced assumptions. Invoking (I4ip we now get 
& and the one-law is established. ■ 


5.2 Establishing the zero-law 

This section is devoted to establishing the zero-law in Theorem 13.11 namely the fact that inhomo¬ 
geneous random key graph contains at least one isolated node when the scaling condition ([7]) is 
satisfied with c < 1. We will establish this by applying the method of second moment m Remark 
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3.1, p. 55] to a variable that counts nodes that are class-1 and isolated. Clearly, if we show that 
whp there exists at least one class-1 node that is isolated, then the desired zero-law will follow. 

Let Yn{n, 9) denote the number of isolated nodes in G(n; /x, 6^) that are class-1. Namely, with 
Xn,i{t^,9) denoting the indicator function that node Vi is isolated and belongs to class-1, we have 
Yn{tJ.,e) = ELiXn, £(/x,0). The second moment method states the inequality 


F[Yn{^l,e)=0] < 1 


F[Yr,ifX,0)f 

E[y„(/x,0)2]- 


(44) 


Also, by exchangeability and the binary nature of the rvs Xn,i ) • • • ) Xn,n itJ',9), we have 
E[y„(/x,0)] = nE[xn,i{tJ;9)] and 

E [Ynifi, 9f] = nE [xn,i(/x, 9)] -|- n{n - 1)E 0)Xn,2(/^, 9)] . (45) 


It then follows that 

E \Yn{^l,9f] ^ 1 _^ n - 1 _ E[xn,l{^^,9)xn,2{^^,9)] 

E[Yn{^l,9)f ~ nE[xn,l{^^.9)] n ' {E[xn,l{^^,9)])^ 

From ([441) ()46]1 we see that 


(46) 


holds if 


and 


lim sup 

n—>-oo 


lim P [Ynifi, 9n) = 0] = 0 

n^oo 

lim nE [xn,i{fJ-,9n)] = oo 

n—^oo 

I E [Xn,l(Al, 9n)Xn,2{9-, 9n)] 


< 1 . 


(47) 

(48) 

(49) 


{^[Xn,l{9-,9n)]f / 

However, since In{fJ-,9n) > Yn{n,9n), ()47|l immediately implies the desired the zero-law 

lim P [InifJ-, 9n) = 0] = 0. 

n—)-oo 

The next two technical propositions establish the needed results (1481) and ()49p under the ap¬ 
propriate conditions on the scaling 0 : Nq —)• N] 


r+l 


Proposition 5.1 Consider a scaling Ki ,..., , P : Nq —)• such that (0) holds with lim„_,.oo Cn 

c > 0. Then, we have 

nE [xn,i(M, 9n)] = (1 + o(l))/iin^“‘'" (50) 

so that 

lim nE [xn,i(/.t,0n)] = oo if c < 1. (51) 


Proposition 5.2 Consider a scaling Ki ,..., , P : No —)• Nq'*'^ such that ([^ holds with lim„_).oo Cn 

c > 0. Then, we have HSl). 

A Proof of Proposition 15 .1 1 is given in Section [6.11 while Proposition 15.21 is established in Section 

[Q 
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6 Proofs of Propositions 15.11 and 15.2 

6.1 A proof of Proposition 15.11 

Fix n = 2, 3,..and pick u and 0. We have 


nE[xn,i{p-,d)] = nP is isolated and class-1] = nfj,iF[vi is isolated | vi is class-1] 

= n^iP [n”= 2 bi I is class-l] 

= n^i (P V 2 \ vi is class-1](52) 

by virtue of the fact that the events {ui 9 ^ Vj }^^2 independent conditionally on Si. Invoking 
(115|) . we then get 

nE[xn,iip,0)] = . (53) 

Now, consider a scaling Ai,..., A,., P : No —)• such that Q holds with limn_>.oo Cn = c> 0. 

Using this scaling in ([53]) and recalling (l35]) we get 


nE [Xn,i (/^, On)] = nm 1 - c 


logn 


n 


n—1 




2 (lognp / V-(gnl2|Ii) 


_ —Cn ^Cn 


log r 


= fiin "^e ri e 

The desired result (1501) is now immediate as we recall ([361) and note that 

( 


lim = 0 , lim 

n—>-oo Tl n—>-cxD 


V 


logn \2 I 2 ’ ^ ^ n 2 


= 0 


since lim„^oo = c > 0 . From (l50]l . we readily get (ISTI) upon noting that fii > 0 . 


(54) 


6.2 A proof of Proposition 15.21 

We start by obtaining an expression for the probability that nodes ui and V 2 are class-1 and isolated 
in G(n; fx,e). We get 


IE[Xn,l(Al,0)Xn,2(41,0)] 

= fi^F [ui and V 2 are isolated j ui and V 2 are class- 1 ] 


= njF [Si n S2 = 0 I JSil = IS2I = Ai] 


n"=3[s,- n (Si u S2) = 0] 


Si n S2 — 0, 

jSil = IS 2 I = Ai 


/P-iClN 


(kJ ■ 


S3 n (Si u S2) — 


Si n S2 — 0, 

JSil = IS 2 I = Ai 


n—2 


- 

4*1 / p 






n—2 


/PI /P\ 

\kJ \ 7=1 Kkj 


(55) 
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upon conditioning on the class of v^. Similarly, it is easy to see that 


Combining (|55]1 and (f56ll . we find 


r 

E V Kj ) 

\kJ 


n—1 


(56) 


vi=i 


/ 


n—2 


^[Xn,l{^^,0)Xn,2{^^,0)] _ ( Ki^) 


(IE [Xn,l[^J^,0)]y 


o 




{D 


\ 




il) 


V ("f) 

2^^^J-rpT 

j=l \Ki) 


-2 


(57) 




Consider a scaling 0 : No —)■ Nq"*"^ such that ([7]) holds with c < 1. Reporting this scaling into 
the last expression, we see that 


’ /n— J^l,n\ 

V Kjn > 

7 = 1 


-2 


= (1 - Ai(n)) ^ = ( 1 - c 


log n 


n 


-2 


= 1 + 0 ( 1 ). 


(58) 


With pij (n) increasing with i and j as shown in Proposition 14.11 it is also clear that 


1 > , p s = 1 - pii(n) > 1 - Ai(n) = 1 - c 


( Pn \ 

\Ki,J 


n ) 

n 


leading to 


/ Pn — ^l,n\ 
V Ki,r^ ) 



Finally, we note from Proposition 14.41 that 


l-o(l). 


/ Pn — 2.K\^ri\ 
^ ^3,rr J 

-JP^ 


< 


f Pn — ^l,n\ 

^3,r. ) 

T^ry 

\KiJ 


3 = 1, 


+• 


Let ZnifJ-, On) denote a rv such that 


On) 


Pn ^1,7T^ 

y — with probability pj, j = 1,... ,r. 

yK^j 


(59) 


(60) 


Applying ((58|) . ([59]), and ([HO]) in (l57|l we see that the desired result (l4^ will follow upon showing 


lim sup 

n^oo 


f E[Zn{fJ.,0n)^] 

\E[Zn{tM,0n)f 


n—2 

< 1. 


(61) 
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We note that 


^ W.[Zn{^l,en?] \ 
\E[Zn{fl,er,)f ) 



var[Zn{fi,On)] 

E[Zn{fi,9n)f 


n-2 Var\Zn(fJ-,On)] ,^ 

g E[Zn(^^,On)] 


(62) 


and that 

E[Zn{tx,6n)] = 1 - Ai(n) = 1 - o(l). 

Hence, we will obtain (1611) if we show that 

lim n • var[Zn{tJ-,On)] = 0. (63) 

n—>-oo 


In order to bound the variance of Zn{^, On), we use Popoviciu’s inequality m p. 9]. Namely, 
for any bounded rv X with maximum value of M and minimum value of m, we have 

var[X] < — m)^. 

It is clear from the discussion given in the proof of Proposition 14.11 that 


/ Pn ^l,n\ 
V Kr,n 1 



< Zn{tJ-,0n) < 


/ Pn ^l,n\ 
V Ki,„ ) 



holds for any scaling. Applying Popoviciu’s inequality, we then get 


1 / 

var[Zn{li,0n)] < - ( 


/ -Pn 
\KiJ 



= I {pir{n)y 


(64) 


Reporting the upper bound in (|28]) into (l64)) we now find 

n-var[Zn{^l,0n)\<J(—^^^^^ . (65) 

4 \H.r P J 

Letting n go to infinity in this last expression, we immediately get (l63]l as we note that Hr > 0 and 
limn-).oo Cn = c > 0. This establishes (l6TT) and the desired result now follows. ■ 


7 A proof of Theorem 13.2 
connectivity 


Establishing the zero-one law for 


The proof of Theorem 13.21 is technically more involved than that of Theorem 13.11 To that end, we 
outline the main arguments leading to the proof in this section and complete the remaining steps 
in several sections that follow. 

Fix n = 2,3,... and consider u and 6 = {K, P). We define the event 


Cn{u,0) := [G{n;fj,,6) is connected] 
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and recall that 


[Iniu, 0) = 0] = [G(n; fi, 6) contains no isolated nodes] . 

If the random graph G(n; //, 6) is connected, then it does not contain any isolated node, whence 
Cn{fJ^,0) is a subset of [In{u,6) = 0], and the conclusions 

F[Cn{tl,e)]<F[Iniu,e) = 0] (66) 

and 

F[Cn{t^,er] = F[Cnit^,ern{iniu,e) = o)]+F[iiniu,e) = or] (67) 

follow. Taken together with Theorem 13.11 the relations ()66p and ()67p pave the way to proving 
Theorem 13.21 To see this, pick any scaling Ki,..., Kr, P : No —)■ Nq"*"^ such that ([7|) holds for some 
c > 0. If c < 1, then lim^^oo IP [7n(w, 0^) = 0] = 0 by the zero-law for the absence of isolated 
nodes (see Theorem 13.ip . whence hm„_>.oo P [C'n(/.t, 0n)] = 0 with the help of (l66p . If c > 1, then 
lim„_).oo P [/„(u, 0„) = 0] = 1 by the one-law for the absence of isolated nodes, and the desired 
conclusion lim„_>.oo P [C'„(/x, 0^)] = 1 (or equivalently, lim„_>.oo P [C'n(/.t, ^n)'^] = 0) will follow via 
(I67p if we show the following: 

Proposition 7.1 For any scaling Ki,..., Kr, P : Nq ^ such that m holds for some c > 1, 
we have 

lim P [CnifJ; OnY n {In{u, On) = 0)] = 0. (68) 

n^oo 

as long as the conditions IfWl) and OTI) are satisfied. 

In words. Proposition 17.11 states that the probability of the inhomogeneous random key graph 
being not connected despite having no isolated nodes diminishes asymptotically under the enforced 
assumptions. In fact, the asymptotic equivalence of graph connectivity and absence of isolated 
nodes is a well-known phenomenon in many classes of random graphs; e.g., ER graphs [2], random 
key graphs [25], and intersection of random key graphs and ER graphs |21j . 

The basic idea in establishing Proposition 17.11 is to find a sufficiently tight upper bound on the 
probability in ()68p and then to show that this bound goes to zero as n becomes large. Our approach 
is in the same vein with the one used for proving the one-law for connectivity in ER graphs (2] 
p. 164]. This approach has already proved useful in establishing one-laws for connectivity in the 
standard random key graph |25| and its intersection with an ER graph |2T]. Throughout the proof 
of the one-law for connectivity in inhomogeneous random key graphs, several intermediate results 
will be borrowed directly from 123 ED to avoid duplication. 

We begin by deriving the needed upper bound on the term ()68p . Eix n = 2, 3,... and consider 
u and 6 = (K, P). Eor reasons that will later become apparent we will need bounds on the number 
of distinct keys held by a specific set S of sensors; just to give a hint, this will help us efficiently 
bound the probability that the sensors in S are isolated from the rest of the network. To that end, 
we define the event En{n, 0]X) via 

[jUjgsSj] < 27|5|] (69) 

SCAT: |5|>1 

where N = {1,..., n} and X = [Xi X 2 ■ ■ ■ Xn] is an n-dimensional integer-valued array. 

Let 
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and set 

r [/?£Kij £ = i,2,...,L„ 

X, = I (70) 

[ [ 7 PJ £ = L„ + l,...,n 

for some /3 ,7 in (0, that will be specified later. With this setting, En{fi, 0-,X) encodes the event 
that for at least one i = 1,2,... ,n, the total number of distinct keys held by at least one set of i 
sensors is less than /3iKil \l < L„] + 7 PI [i > L„]. Below, we will show that by a careful selection 
of (3 and 7 , we can have the complement of En{iJL,9n', X^) take place whp under the enforced 
assumptions on the scaling 0 : No ^ all i = 1,2,... ,n, the total number of keys 

held by any set of i sensors will be at least jdlKil \i < L„] + 7 PI [i > L„]. The relevance of this is 
easily seen as we use a simple bounding argument to write 


¥[Cn{tl,eYf\{In{u,e)=ll)] 

< p [Eniti, e- X)] + p ey n (4(ii, 0 ) = o) n En{^l, e- xy]. 

It is now clear that the proof of Proposition 17.11 and hence that of Theorem 13.21 will consist of 
establishing the following two results. 

Proposition 7.2 Consider a scaling Ki, ..., , P : No —)• such that ^ holds for some c > 1, 

m is satisfied for some a > 0, and 01]) holds. We have 


lim ¥[En{^l,6n■■,Xn)] = 0 . 


(71) 


where X^ = [-^i,n • • • Xn,n] is as specified in ^7DI) with (3 in (0,1) is selected small enough to 
ensure 


max 2/3cr, (3 




a 


< 1 , 


(72) 


and 7 in ( 0 , i) is selected so that 


max I 2 ( -^7 


7 


7\ ^ 


>V7 


(f 


< 1 . 


(73) 


A proof of ProDosition [7?2] can be found in Section[8l Note that for any cr > 0, lim^j^o Y ^ = 0 

so that the condition (1721) can always be met by suitably selecting /3 > 0 small enough. Also, we 
have lim.Yj^o ^ 7 ^ = Ij whence lim.y|o \/l ^ 7 ^ = Oj (173)) can be made to hold for any cr > 0 by 
taking 7 > 0 sufficiently small. 

Proposition 7.3 Consider a scaling Ki,..., Kr, P : No ^ such that (0) holds for some c > 1, 
Oil) is satisfied for some cr > 0 , and OH) holds. We have 

lim P [C„(p, OnY n {In{u, On) = 0) (7 En{pi, On, XnY] = 0. (74) 

n^oo 

where Xn = [Xi^n ■ ■ ■ Xn,n] is as specified in iTTOI) with 7 in ( 0 , |) is selected small enough to 
ensure ifTlI) and (3 G (0, ^) is selected such that [7^) is satisfied. 

The proof of Proposition 17.31 is outlined in Section [9] with several steps completed in the sections 
that follow. 
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8 A proof of Proposition 17.2 

The proof of Proposition 17.21 will follow similar steps to [211 Proposition 7.2] and rely heavily on 
the results obtained by the author in [20]. Using a standard union bound we first write 

¥[Enifi,9;X)]< F[|Ui6sS*| < As|] =E ( E 

SCAr:l<\S\<n £=1 \SgA7i,£ 

where Mn/ denotes the collection of all subsets of {1,..., n} with exactly i elements. Let 0) 

be given by 

U£(/1,0) = I Sj], .^= l,2,...,n. 

By using exchangeability and the fact that \J\fn,e\ = we get 

P[L;„(/x,0;X)] < ^ Qp[U,(/.a,0) < X,] 

= ^hy[Ui{t^,e)<[mi\]+ E (”)p[c/,(/.,0)< Lt^J]. (75) 

1=1 ^ ' l=L„+l ^ ^ 

Now, consider any scaling iLi,..., P : Nq —)• and recall the ordering ([ 6 |) of the key ring 

sizes. For any i = 1,2,... ,n dehne Ui{Ki^n, Pn) as 

Ul{Kl,n, Pn) =st Ui{{l, 0 , 0 ... , 0}, 0n)- 

In other words, Ug^{Ki^n, Pn) stands for the rv that has the same distribution with Ui{n, On) when 
is degenerate with = 1 and /ij = 0 for all j = 2,... ,r; i.e., when all key ring sizes are equal 
to Ki. With this setting, Ui{Ki^n, Pn) is equivalent to the rv defined similarly for the standard 
random key graph in [25l[2Tl[20|, where it was often denoted by U(,{9n) with On = {Kn,Pn)- Given 
dH), it is a simple matter to check that 


Ue{Ki^n,Pn) P Ul{fl,en), = {m, . . . , ^r) (76) 

with P denoting the usual stochastic ordering. This can be seen by an easy coupling argument 
where all sensors first receive Ki^n keys and then an additional Ki^n — Ki,n keys are assigned to each 
sensor independently with probability fi£. Since additionally distributed keys can only increase the 
variable U£, we obtain (1761) . 

Reporting (176]) into d75|) we now get 

¥[En{tl,en;Xn)] < ^ [Ui{Kl,n, Pn) < [Pm,n\] + E (f)^Pe{Kl,n,Pn) < [iPn]] • 

e=l ^ ' ^=Ln + l ' 

Assume now that the scaling under consideration satisfies (|7|) for some c > 1, (|13p with cr > 0, and 
m- It was shown (TUI Proposition 7.4.14, p. 142] that for any scaling Ki,P : Nq —)• No x No such 
that (fT3]) holds for some cr > 0, we have 

E (''^P[Ui{K£,n,Pn)<bPn\]=0 (77) 

l=Ln+l ^ ' 


21 





whenever 7 in (0, is selected so that (f73]l holds; see also [20l Proposition 7.4.17, p. 152]. Hence, 
the desired conclusion (1711) will follow if we show that 

Pe{Ki,n, Pn) < WKi^nW = 0 (78) 

e=i ^ ^ 

under the condition (|72p . However, it can be seen from [201 Proposition 7.4.13, p. 140] and [201 
Proposition 7.4.16, p. 146] that with 13 in (0, small enough to ensure ()72p we have (I78p for any 
scaling iPi,P : Nq —>• Nq x Nq such that Ki^^i = With this last condition clearly ensured 

under (1131) and m we obtain (ITHI) . The proof of Proposition 17.21 is now completed. ■ 


9 A proof of Proposition 17.3 


We will now work towards establishing (I74P . namely showing that the probability of G(n;/i„,0n) 
being not connected despite having no isolated nodes approaches zero as n gets large under the 
event En{^i,9n] X^Y. Fix n = 2,3,... and consider u and 6 = {K,P). For any non-empty 
subset S of nodes, i.e., 5 C V = {ui,..., Vn}, we define the graph G(n; fi, 9){S) (with vertex set 
S) as the subgraph of G(n; n, 0) restricted to the nodes in S. With each non-empty subset S of 
nodes, we associate several events of interest: Let C'n(/.t, 0; S') denote the event that the subgraph 
G(n;/x, 0)(S) is itself connected. It is clear that CnitJ-,d] S) is completely determined by the rvs 
{Sj, Vi G S}. We say that S is isolated in G(n; /x, 9) if there are no edges between the nodes in S 
and the nodes in the complement = {ui,..., Vn} — S. Let 9; S) denote the event that S 

is isolated in G{n;tJ,,9), i.e., 

H„(/x, 6>; S) := [S, n S,- = 0, Vi G S, Vj G S"]. 

Finally, we set 

Anin, 9; S) := 9; S) PI H„(/x, 9; S). 

Our main argument towards establishing (|74l) relies on the following key observation: If G(n; /x, 9) 
is not connected and yet has no isolated nodes, then there must exist a subset S of nodes with 
|5| > 2 such that G(n;/x,0)(5) is connected while S is isolated in G{n;tJ,,9). This is captured by 
the inclusion 

a(/x,0)'^n(4(xx,0) = 0) C IJ An{ti,9-,S) (79) 

5CV: |5|>2 

It is also clear that this union need only be taken over all subsets S of {ui,..., Vn} with 2 < |5| < 

LtJ- 

We now apply a standard union bound argument to (17^ and get 


P [a(/x, 9Y n (4(XX, 0) = 0) n 0; X)^] 

< F[Ar,{fi,9-,S)nEn{fi,9-,XY] 

5CV: 2<|5|<LfJ 

L?J / 

= E Y. ^^Mt^^0-,s)nEnitJ.,9-,xY] 
£=2 
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where Vn,i denotes the collection of all snbsets of {ni,..., Vn} with exactly i elements. 

For each = 1,..., n, we simplify the notation by writing '■= O; {ni,..., Vf}), 

Bn,£{fJ-,0) := B„(/x,0;{ni ,... ,Vi}) and Cn,eifJ-,0) := CnifJ-,0-, {m,... ,Vi}). With a slight abnse of 
notation, we use Cn{tJ-,d) for i = n as defined before. Under the enforced assumptions, exchange¬ 
ability yields 

P [Anitl, e- 5)] = P [An^£{^l, 6)], SG Vn,£ 

and the expression 

^ p [Ar^ifi, e-s) n e- x)'^] = M p n E^(fx, e- x)‘=] (si) 


follows since \Vn,£\ = Q)- Substituting into (fHOjl we obtain the key bound 


P [Cnit^, ey n {In{u, 0) = 0) n En{^l, 6; X)'^] < ^ Qj P [AnAfJ^, 0) n U„(/x, 0; X)‘=] . (82) 

Next, we derive bounds for the probabilities appearing at (j82p . Recall the dehnitions ([2]) and 

©• 


Proposition 9.1 Consider 6 = [K, P) and p = {fri ,..., fir) such that Ki < K 2 < • • • < K^. We 
have 


P K,,(p, 0) n EnA, 0; xy] < min { 1 , (min {1 - Ai, E 

where \ T, \ denotes a rv such that 

|S| = Kj with probability pj, j = 1,... ,r. 


e p 


» n-£ 

(83) 


Proof. We start by observing the equivalence 

Bn,iA^^)= n Sj = 0, j = t + 


Hence, under the enforced assumptions on the rvs Si,..., S„, we readily obtain the expression 

Y) _ f 

= E 



Si,. 

■, Sf 

II 

- 1 




j=£+l 


/P-|uf^iEiK 
V ISJ ) 


(iCi) 


(lfl) 


where |S| denotes a rv that takes the value Kj with probability pj for each j = 1,..., r. Note that 
we always have | uf^i Sj| > Xi, while it holds that | uf^i Sj| > X^ -|- 1 on the event £’„(/!, 0] X)'^. 
Combining, we get 


P 


Id En{tJ-, 0 ;X) 


Si,..., S^ 


< min < 


E 


(i?i) 


,E 


(P-(Xi+iW 

^ |s| ) 

Q 


n—£ 
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< 



1 - Ai,E 


r _PQ+i)M 
e p 


}) 


n—£ 


(84) 


where in the last step we also used (f371) . 

Conditioning on the rvs Si,..., S^ which fully determine the event 0)), we conclude via 

(|84tl that 


IP ^ Xf] = IP [CnAt^^ ^)) ^ S)) H 6; X) 


1 [CnAt^^ ^))] IP BnAP--, C En{^l■, 0; X 

(x,+i)m 


= E 

< P[C„,£(/X,0))] (^minjl - Ai,E 
In view of this last bound, Proposition 19.11 will be established if we show that 


}) 






(85) 


To see why (f85]) holds, observe that the subgraph of G(n; /i, 6) on the vertices vi,... ,Vi, here¬ 
after denoted Gi{n; /i, 9), is connected if and only if it contains a spanning tree. Let 7^ denote the 
collection of all spanning trees on the vertex set {ui,..., vi}. Then, we have 


Cn,eA^ = CTGTi [I^ ^ Gi{n] n, 6 )] 

By Cayley’s formula m there are A ^ trees on i vertices, i.e., \7}\ = A In addition, for any T 
in 7i, it is clear that 


P [T C G^(n; /i, 6>)] < P [T C G^n; {0,..., 0,1}, 9)] 

since Kr > Kj for any j = 1,2,... ,r — 1; i.e., probability that the tree T is contained in this 
subgraph is maximized when all the nodes in the subgraph belong to class-r that are assigned the 
largest number of keys. With pr = 1, Gi{n] fj,,9) becomes equivalent to the standard random key 
graph GiA', Kr, P) for which it is known [251 Lemma 9.1] that 

F[TCGein;fi,9)] = {prrY-\ T€Ti, i = 2,3,... 

This follow from the fact that a tree on i nodes consists of £ — 1 edges and that edge events in the 
random key graph are pairwise independent. Collecting, we obtain via a union bound that 

P [CnAtJ-. 0)1 < P [T C G,(n; p, 0)] < P [T C G,(n; {0,..., 0,1}, 9)] < (p^)^"^ . 

TGTe T&Te 

This establishes (1851) and the proof of Proposition (19.ip is now completed. ■ 


m 


Now, consider a scaling 0 : No —)■ Nq ^ as in the statement of Proposition [73J Using this scaling 
together with ()83l) we see that the proof of Proposition 17.31 will be completed once we show 


Ifl 

lim > 


i=2 


n 


mm 


in|l,t'^ '^{Prr{n)Y ^min |l — Ai(n),E 


(^i,n+l)|S|n 

Pn 


n—£ 


= 0 . 


( 86 ) 
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Combined with Proposition 17.21 this will lead to Proposition 17.11 and hence to Theorem 13.21 To 
that end, we devote the rest of the paper to establishing ([861) . Throughout, we make repeated use 
of the standard bounds 


/n\ /eny i = 1 ,... ,n 

\i) - \Y) ’ n = 1,2 ,... 


(87) 


and 



( 88 ) 


where the latter follows from the Binomial formula. 


10 Establishing (l86l) 

We will establish (1861) in several steps with each step focusing on a specific range of the summation 
over £. Throughout this section, we consider a scaling Ki,... ,Kr,P : No —)• Nq"*"^ such that ([7]) 
holds for some c > 1, (1101) holds for some a > 0 and dill) is satisfied. The desired result d86l) follows 
from (pUjl . (1^ . (jlUip . (|104p . and (|lU7p that are established in Sections fl0.llll0.51 respectively. 


10.1 The case where 2 < i < R 

The first range considers fixed values of £. For the moment, fix an integer R that will be specified 
later in Section 00.21 see ([96]) • For each £ = 2,..., R we use (fSTp . (l27p . and ([Tj) to get 


^^^min|l,£^ ^{prr(.n)Y ^min |l - Ai(n),E 

< (y)'/-^(p..(n))^-i(l-Ai(n))"-' 

< {enY{prr{n)Y~^e-'^’^^°^^Y 


e ^ 


n—£ 


= o(l) 

= 0 ( 1 ) 
= o(l) 



{lognY\ 

- n 

n J 

(logre)^^“^ 


(89) 


upon noting that lim„_).oo 1 — = 1 — c < 0 on the given range of £. Thus, for any R we have 


lim min |l,£^ ‘^{Prr{'n)Y Tmin |l — Ai(n),E 


£=2 


e ^ 


n—£ 


= 0. (90) 


10.2 


The case where R + 1 < £ < 


Ur'R' 

2/3clogn 


Next, we handle the range where R + 1 < £ < 


from 


that 


^l,n 


f-Lr Th 

2/3clogn 


= o 


j, or equivalently that 


. Noting that Ki^n < Kr,n, we realize 
= Al Also, ([in|) and ([II]) imply 
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together that Ki^n = leading to = w Hence, on the range under consideration 

here, we have i < Ln = min([-j^^J, [^J) so that Xi^n = [l3iKi^n\ ■ With this in mind, we get 





r /9«l,nlSkl 

E 

CC) 

1 

? 

< E 

CC) 

1 


^ fije 

i=i 


< 1 — fJ-r + fJ-rG 


In view of (l29]) . 


„„KinKrn ^ . 2c log n 

(51 ’ ’ < pi -^ < 1. 

Pn A^r n 


holds for all n sufficiently large and I < 2 i^c\og n • Hence, on the same range we have 

PiKi^nKr,n 

1 — e > 


2H, 


(91) 


Reporting these into (IM|) we get 


E 


ptK^^^Kr,n 

< 1 — AZr ( 1 — e 


< 1 — Air 


PlKi^nK, 


2P„ 


r,n . _ Mrffe £ logn 

< e 4 n (92) 


for all n sufficiently large, where the last inequality follows from the lower bound in 

Consider now the range of n sufficiently large that (fMl) is valid. Using (l92]l . (fHT)) . and (1271) . we 
get 


n 


in|l,A^ ^(Prr(ra))^ fmin 11 — Ai(n),E 


I I 

|_ 2^c log n J 

I „ I mm 

i=R+i 

I Mr-ra I 

[2/3clognJ ,, >2x^-1 

^ V ^ / 

I pm I 

|_ 2/3c log n J 




n—£ 




e 4 


£=ii;+i 

oo 


2g_ii^logn^^ 


£=R+1 

Since fir, P, c are all positive scalars, we have 


lim e(logn)^e logn _ q 

n—¥oo 

so that the inhnite series appearing at (1931) is summable. In fact, we have 


(93) 


n 


(e(logn)2e-^^°sr^'i^ _ 




i=R+l 


^ = (1 + o(l))n ^e(logre)^e 

= 0(l)ni-(^+i)'^(logn)2^+2_ 


(94) 
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It is now clear that we get 


I I 

|_ 2/3c log n j 

lim > 

n.—^cio < ^ 


n 


mm 


as long as R satisfies 


inlljt'^ ^(prrin)y Tmin — Ai(n) 




e ^ 


n—£ 


R > 


Prl^C 


= 0 (95) 


(96) 


Since pr, (3,0 0, such a selection is permissible given that (|M|) holds for any positive integer R. 


10.3 The case where 


j-L'f' Tl 

2(3c log n 


+ 1 < £ < min{L„, 


We now consider the range where 2 i 3 ciogn < ^ [i^n \} for some 0 < < 1/2 to be specified 

later; see pUUp . Prom (1701) . we see that = [(3iKi^n\ so that (|0T]) still holds. Using (|0T]) and 
on the given range, we get 


E 


■ (Vf,„ + l)|S|„ -| 

e 


< [ 1 — Pr + 


n—£ 


_ ^ 7 -n c loK n \ 

< [1 — Pr + 2 n 

_ Mr \ *^72 

— (1 IJjf IJj-pC ^ 


(97) 


for all n sufficiently large. Also, since (”) is monotone increasing in i over the range 0 < £ < [n/2j 
we have 


n 


^ n N 

[un]; \u, 


(98) 


by means of (l87|) . 

Using ((971) and (l98]) we now find 


n 


mm 


|l,£^ '^{prr{n)f fminjl - Ai(n),E 


min{Ln,\yn \} 

E vz 

„ I Mrn I , . 

[2/3clognJ^-^ 

<ny-j \l-pr + Pre 

'e\'^ / _Mr\ 1/2 

= n I 1 - j yl - pr + Pre ^ 


for all n sufficiently large. With pr > 0, it always holds that 

. _Mr\l/2 ^ 

1 — Pr + Pre 4 I <1^ 

while we have 

lim (-X = 1. 
u^O XU / 




n—i 


(99) 
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Therefore, for any Hr > 0, i' can be selected small enough to ensure that. 


1 — flj- -\- 4 


< 1 . 


(100) 


With selected according to (llOOl) . we immediately obtain 

m.m{Ln^lun\} 


min|l,£^ ^(p„(n))^ ^minjl - Ai(n),E 

|_2/3cTognJ 


e P-n. 


n—l 


= 0 


( 101 ) 


in view of (1991) . 

10.4 The case where min{L„, [z^nj} + 1 < i- < Ln 

Our next goal is to handle the range min{L„, [z^nj} + 1 < ^ where it still holds that 

^i,n = • This range will become obsolete if < [z^rej, so we only consider the case where 

\yn\ < L„, and hence the range \yn\ + 1 < (■ < Ln. On this range, we use the crude bound 
|T|n > i^i,n to get 




n-l ( /3£k2„ 

E 

e P-ri 

< e Pr, 



\ 


< 


/3«l,n „ 
Pn 2 


< 




( 102 ) 


where we also note that n — i > S. Using (11021) and (1551) we now get 


n 


^ Wjmin|l,/ ^(prr(n))^ ( min | 1 - Ai(n),E 

l=Ya\\l{Ln , } + l 

( Lr, 

^=min{Lri, [i^nj }+! 

/ 0 \ n 


(^.^,72+1)1^1^ 


n—£ 


^vK- 

e ^ 


2 

l,n ^2 


< 2e 


(103) 


Under the enforced condition (11111 on the scaling we have that —^n = uz(l), so that 




2e 2 ^" = o(l) 
since /3, Z 2 > 0. Reporting this into (llOOp . we immediately obtain 


lim 

n—>-oo 


^ minjl,-^^ ^{Prr{n)Y Tmin |l - Ai(n),E 


£=mm{Ln , \_i^n\ }+l 





(104) 
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10.5 The case where Ln + 1 < I < [f J 

Finally, we consider the range Fn + 1 < ^ j where we have as stated in (170]) . 

Using once again the crude bound |S|„ > Ki ^ we get 


E 


e ^ 




(105) 


In view of (1105]) and (155]) we find 


LiJ 

E 

£ —Z/n + 1 


n 


mm 


in|l,^^ ^{prr{n)Y l^min 11 — Ai(n),E 




< 


< 



e-7i^i.n 


H 

2 


n—£ 


(106) 


As before, we have under (fTOl) and (fTTI) that Ki^n = w^(l) leading to 

2e -2— = o(l). 

Reporting this into (|106j) . we immediately obtain 

LfJ . X . ( 

lim ^ ^ j min|l,^^“^(prr(ra))^~^| ( min < 1 — Ai(n),E 




= 0. (107) 
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Appendix 


A A proof of Corollary 13.3 


In this section, we will show that combined together Theorem 13.11 and Theorem 13.21 is equivalent to 
Corollary 13.31 under the enforced assumptions. Consider a probability distribution /x = {pi ,..., pr) 
with Pi > 0 for all i = 1,..., r and a scaling Ki,..., Kr, P : No —)• Nq"*"^. The aforementioned 
equivalence of the results will follow upon showing the equivalence of the conditions d?]) and (1141) . 
namely that for any c > 0 we have 


\ \ logn A:i,„E[|S| 

Ai(nj ~ c- it and only it 


log n 


n 


Pn 


n 
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In order to establish this, we will show that either of the conditions ([7|) or (|14ll individually imply 
Ai(n) ~ ^ equivalently that 

'^Pij(.n)nj ~ ^ (A.l) 

1 1 
j=i j=i 

Since u,,- > 0 for all i = 1. r. (|A.lh will follow immediatelv if we show under either (Tfll or m 

that 

pij(n) ^ j = l,...,r. (A.2) 

Lemma 02] readily gives (IA.2P as we note that for all j = 1,..., r, d?]) implies pij{n) = o(l) while 
(fni) implies = o(l). The equivalence of Theorem l3.1I Theorem [321 with Corollary 13.31 is 

now established. ■ 
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